PT-2007-6405 · Mozilla · Firefox

Rflint

+1

·

CVE-2007-5335

·

Published

2007-10-24

·

Updated

2018-10-03

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.8
Description: The issue allows remote attackers to obtain sensitive system information. This is achieved by using the addMicrosummaryGenerator sidebar method to access file: URIs.
Recommendations: For versions prior to 2.0.0.8, update to version 2.0.0.8 or later to resolve the issue.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-5335
DSA-1396-1

Affected Products

Firefox